Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa
File:                     fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa (raw, json)
Hash identifier:          g8kS0fTgjA8bq1YpZUmye0YalmqX3aixjStkKX6uExs=
Subject key identifier:   CE:C3:69:2F:42:55:76:62:C1:DD:7E:2C:F4:E2:01:85:B6:CF:47:FB
Certificate issuer:       /CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
Certificate serial:       010D0C9F4328584B52A7538F32CD36FB391E8F80
Authority key identifier: 87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     26404
IP address blocks:        69.42.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:53:8f:32:cd:36:fb:39:1e:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=d79c15e9-2be7-46ad-9ad9-c7ce7f31e2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:25:36:12:e5:ba:22:40:b3:57:dd:70:6b:
                    30:79:36:fe:cc:76:ff:c7:75:27:76:98:cb:2f:2e:
                    ac:ed:08:13:58:d7:90:ac:81:ee:ca:1a:ce:74:24:
                    ce:87:0e:5f:5f:14:77:ba:bd:58:3e:84:00:ce:63:
                    99:5e:41:be:36:86:05:b3:60:1b:f1:96:b2:53:c9:
                    5e:72:33:02:c9:cb:cf:df:58:e4:f2:ca:d7:17:72:
                    7c:03:54:6f:4e:e1:e0:02:99:06:5e:00:bd:b9:7f:
                    5f:f8:9b:da:51:bb:6f:0b:98:c6:6f:39:16:31:45:
                    4d:d0:3a:64:1e:b6:66:10:c0:24:03:01:c9:19:15:
                    89:68:23:54:fa:90:a6:a4:b7:3b:24:f9:38:b3:63:
                    e3:f5:f9:a4:eb:0b:a4:13:6d:df:3c:4a:22:9d:9b:
                    1d:5c:68:26:07:8c:1f:22:81:c7:81:85:1f:1d:10:
                    4f:e8:3e:80:6d:75:7e:32:9d:ab:ba:c4:ab:65:29:
                    ed:7c:b2:22:62:d9:74:84:8a:3e:b3:94:3a:36:5a:
                    b9:d6:84:a7:16:6a:b9:d6:e5:18:7e:29:87:3a:75:
                    15:c7:f7:dc:c0:f7:70:22:97:03:86:19:dd:ae:ff:
                    33:b0:a8:84:2a:d9:1b:6c:13:6f:82:40:d8:ad:e3:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C3:69:2F:42:55:76:62:C1:DD:7E:2C:F4:E2:01:85:B6:CF:47:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl

            X509v3 Authority Key Identifier:
                keyid:87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:21:11:50:3c:25:1d:b9:ef:af:41:63:cd:18:64:67:40:41:
         dd:39:78:47:61:1f:6a:ef:38:12:00:84:1d:dc:59:66:ab:a5:
         06:ee:f7:54:87:18:13:a6:3b:07:de:0f:ee:39:7e:ac:74:00:
         a6:96:4a:7a:a9:02:61:5f:0e:72:f0:00:19:05:4c:5c:ed:48:
         44:4a:ba:e1:21:69:f4:dc:67:73:1c:60:e6:24:d5:bb:ba:2b:
         5f:2e:ba:bb:19:ec:8f:34:10:40:7a:42:ec:dc:ad:14:dd:8a:
         f8:b0:f7:c1:24:ad:82:66:66:71:d4:b1:14:84:ec:eb:82:1d:
         24:b5:02:b1:53:c7:76:90:b3:ea:3c:d6:14:2d:b1:7e:95:a8:
         48:12:53:45:f4:89:24:01:b1:6e:4a:81:7c:44:e2:66:d5:3c:
         56:8f:3f:e1:5d:d4:83:95:cb:26:a9:91:38:f5:95:44:be:de:
         59:af:52:14:28:81:e8:fe:c2:c1:dd:ff:5b:18:19:37:f2:fa:
         1e:f1:f7:be:d7:30:cb:b4:0b:72:b2:49:5f:7c:15:1e:97:8b:
         9a:66:58:78:e4:a1:c0:4f:ab:48:8f:3d:0e:31:7d:29:68:92:
         c5:22:f5:60:7e:d1:5b:df:68:e0:e4:48:d9:55:14:1f:cd:9a:
         57:16:ee:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1OPMs02+zkej4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRlOWYyOWQtMjU4MC00NTNiLWFkOWYtMmRjYTg1ZWRh
YTQ4MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk
ZDc5YzE1ZTktMmJlNy00NmFkLTlhZDktYzdjZTdmMzFlMmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcslNhLluiJAs1fdcGsweTb+zHb/x3UndpjL
Ly6s7QgTWNeQrIHuyhrOdCTOhw5fXxR3ur1YPoQAzmOZXkG+NoYFs2Ab8ZayU8le
cjMCycvP31jk8srXF3J8A1RvTuHgApkGXgC9uX9f+JvaUbtvC5jGbzkWMUVN0Dpk
HrZmEMAkAwHJGRWJaCNU+pCmpLc7JPk4s2Pj9fmk6wukE23fPEoinZsdXGgmB4wf
IoHHgYUfHRBP6D6AbXV+Mp2rusSrZSntfLIiYtl0hIo+s5Q6Nlq51oSnFmq51uUY
fimHOnUVx/fcwPdwIpcDhhndrv8zsKiEKtkbbBNvgkDYreMNfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM7DaS9CVXZiwd1+LPTiAYW2z0f7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZGU5
ZjI5ZC0yNTgwLTQ1M2ItYWQ5Zi0yZGNhODVlZGFhNDgvZmZmMDFlMjYtOGM2OS0z
MmJkLWIxYmEtNTU2N2RiZGQ2MjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGRlOWYyOWQtMjU4MC00NTNiLWFk
OWYtMmRjYTg1ZWRhYTQ4L2RkZTlmMjlkLTI1ODAtNDUzYi1hZDlmLTJkY2E4NWVk
YWE0OC5jcmwwHwYDVR0jBBgwFoAUh9v4ovk7/4h5CwYMr7gtQxoBRxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZGU5ZjI5ZC0yNTgwLTQ1M2ItYWQ5Zi0yZGNh
ODVlZGFhNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD4hEVA8JR25769BY80YZGdAQd05eEdhH2rvOBIAhB3cWWarpQbu91SH
GBOmOwfeD+45fqx0AKaWSnqpAmFfDnLwABkFTFztSERKuuEhafTcZ3McYOYk1bu6
K18uursZ7I80EEB6QuzcrRTdiviw98EkrYJmZnHUsRSE7OuCHSS1ArFTx3aQs+o8
1hQtsX6VqEgSU0X0iSQBsW5KgXxE4mbVPFaPP+Fd1IOVyyapkTj1lUS+3lmvUhQo
gej+wsHd/1sYGTfy+h7x977XMMu0C3KySV98FR6Xi5pmWHjkocBPq0iPPQ4xfSlo
ksUi9WB+0VvfaODkSNlVFB/NmlcW7vM=
-----END CERTIFICATE-----
Generated at Thu Oct 9 03:52:51 2025 by rpki-client